aviz85/x-bookmarks-fetcher
skills/x-bookmarks-fetcher/SKILL.md
Fetch X (Twitter) bookmarks via the official X API v2. Downloads recent bookmarks with text, images, and videos into a local folder. Use whenever user asks to grab/download/export their X bookmarks, save bookmarked tweets, or pull recent saved posts from X/Twitter. Uses OAuth 2.0 user-context auth (one-time browser consent, then refresh-token forever).
$ install --global
skillsauthnpx skillsauth add aviz85/claude-skills-library x-bookmarks-fetcherInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 20, 2026, 3:26 AM192.5s6 files scanned
SKILL.md
- name:
- x-bookmarks-fetcher
- description:
- Fetch X (Twitter) bookmarks via the official X API v2. Downloads recent bookmarks with text, images, and videos into a local folder. Use whenever user asks to grab/download/export their X bookmarks, save bookmarked tweets, or pull recent saved posts from X/Twitter. Uses OAuth 2.0 user-context auth (one-time browser consent, then refresh-token forever).
X Bookmarks Fetcher
Download X/Twitter bookmarks via the official X API v2 (no scraping, no Chrome session). Saves tweet text, metadata, images, and videos to a local folder.
First-time setup
If scripts/.env does not yet exist, follow SETUP.md in this skill folder. It walks through:
- Creating an X developer app with OAuth 2.0 enabled
- Setting the callback URL to
http://127.0.0.1:8765/callback - Copying client ID/secret into
.env - Running
npm run auth(one-time browser consent → saves refresh token)
Once scripts/.env and scripts/.tokens.json exist, fetching is pure API.
Quick Start
cd ~/.claude/skills/x-bookmarks-fetcher/scripts
# One-time auth (opens browser for consent, saves tokens)
node auth.mjs
# Fetch bookmarks from the last 48 hours (default)
node fetch.mjs
# Custom hours window
node fetch.mjs --hours 24
# Custom output folder
node fetch.mjs --hours 48 --out /tmp/my-bookmarks
# Specific time range (ISO timestamps)
node fetch.mjs --since 2026-05-19T00:00:00Z
Options for fetch.mjs
| Option | Default | Description |
|--------|---------|-------------|
| --hours <N> | 48 | Filter to tweets created within last N hours |
| --since <iso> | derived from --hours | Lower bound (ISO 8601 timestamp). Overrides --hours |
| --out <dir> | /tmp/x-bookmarks-YYYYMMDD | Output directory |
| --max-pages <N> | 20 | Stop after N API pages (100 bookmarks each) |
| --no-media | off | Skip downloading images/videos |
What gets saved
<out>/
├── bookmarks-raw.json # Full API response (incl. includes for users, media, referenced tweets)
├── index.json # Parsed/flattened items
├── index.md # Human-readable summary
├── <handle>_<id>.txt # One file per bookmark with text + URL + media list
└── media/
├── <media_key>.jpg # Photos
├── <media_key>.mp4 # Highest-bitrate MP4 for videos/GIFs
└── <media_key>_poster.jpg # Video thumbnails
Filtering note
The X API returns bookmarks in bookmarking-order (most recently saved first), but doesn't expose the bookmark timestamp. The --hours / --since filter is applied to tweet created_at (when the post was published). For most uses this approximates "what I saved recently" — but if you bookmarked an old tweet today, it will be excluded.
API tier requirements
- Endpoint:
GET /2/users/:id/bookmarks - Auth: OAuth 2.0 User Context with
bookmark.readscope - Available on Free tier (rate limited — currently ~10 requests per 15 min)
Files in this skill
SKILL.md— this fileREADME.md— same content as SKILL.md, for non-Claude readersSETUP.md— first-time setup walkthroughscripts/auth.mjs— OAuth 2.0 PKCE flow (opens browser once)scripts/fetch.mjs— bookmark fetcher + media downloaderscripts/.env.example— credential templatescripts/.gitignore— ignores.envand.tokens.json
Related Skills
aviz85/live-transcribe
tools
VerifiedTrustedCommunity
Start real-time microphone transcription using ElevenLabs Scribe v2 Realtime. Use when user wants to start live transcription, dictation, or real-time speech capture. Triggers on: 'תתחיל תמלול', 'תמלל בזמן אמת', 'start transcribing', 'live transcribe', 'הקלט מה שאני אומר'. After starting, tell user they can say 'אוקי זה מספיק בוא נעצור את התמלול' to stop, or use /live-transcribe-stop.
38SKILL.mdUpdated May 27, 2026
aviz85/live-transcribe-stop
tools
VerifiedTrustedCommunity
Stop a running real-time transcription. Use when user wants to stop/end live transcription. Triggers on: 'עצור תמלול', 'תעצור את התמלול', 'stop transcribing', 'end transcription', 'תפסיק להקליט'.
38SKILL.mdUpdated May 27, 2026
aviz85/live-transcribe-read
testing
VerifiedTrustedCommunity
Read the latest real-time transcription. Use when user asks to see, read, or show a transcription that was captured via live-transcribe. Triggers on: 'תקריא תמלול', 'מה תמללתי', 'התמלול האחרון', 'show transcription', 'what did I say', 'read the transcript', 'מה נכתב בתמלול', 'תראה לי את התמלול'. Also use when user references transcription content without being explicit — e.g. 'summarize what I said', 'translate the transcription'.
38SKILL.mdUpdated May 26, 2026
aviz85/x-bookmarks-fetcher
development
VerifiedTrustedCommunity
Fetch X (Twitter) bookmarks via the official X API v2. Downloads recent bookmarks with text, images, and videos into a local folder. Use whenever user asks to grab/download/export their X bookmarks, save bookmarked tweets, or pull recent saved posts from X/Twitter. Uses OAuth 2.0 user-context auth (one-time browser consent, then refresh-token forever).
34SKILL.mdUpdated May 20, 2026